Vulnerability in Zyxel N300 Netusb Nbg-419n

CVE-2014-0354

The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 has a hardcoded password of qweasdzxc for an unspecified account, which allows remote attackers to obtain index.asp login access via an HTTP request.

EPSS: 0.008 (51.4th percentile) — read the EPSS interpretation.

Affected products

Zyxel N300_netusb_nbg-419n
Zyxel N300_netusb_nbg-419n_firmware — versions 1.00\(bfq_6\)c0
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)